bpxch Privacy Policy

bpxch is an online casino and sports betting platform operated under an international gaming licence. The bpxch platform is accessible at bpxch.app and is directed primarily at adult players aged 21 and above residing in Pakistan and other permitted jurisdictions. For the purposes of this Privacy Policy, bpxch acts as the data controller in respect of all personal data collected through the bpxch platform.

As data controller, bpxch determines the purposes and means by which your personal data is processed. We are committed to processing your data lawfully, fairly, and transparently in accordance with applicable data protection legislation and the principles set out in this Privacy Policy.

bpxch collects personal data in the following categories, depending on how you interact with the platform:

bpxch does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is strictly necessary for identity verification purposes.

bpxch uses the personal data it collects for the following purposes:

• To create and manage your bpxch account, including verifying your identity and age in compliance with our gaming licence obligations.
• To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa/Mastercard, and USDT, and to maintain accurate transaction records.
• To detect and prevent fraud, money laundering, terrorist financing, and other illegal activities on the platform.
• To deliver customer support and resolve complaints or disputes raised through live chat or email.
• To personalise your experience on bpxch, including displaying relevant games, promotions, and content based on your activity history.
• To send you transactional communications — such as deposit confirmations, withdrawal notifications, and security alerts — that are strictly necessary for account management.
• To send you marketing communications about bpxch promotions, bonuses, and new game releases, where you have provided consent or where we have a legitimate interest to do so, and subject always to your right to opt out.
• To conduct responsible gaming monitoring, identify players who may be exhibiting signs of problem gambling, and apply appropriate safeguards.
• To maintain the security, performance, and stability of the bpxch platform through technical analytics and monitoring.
• To comply with legal and regulatory obligations imposed on bpxch by its gaming licence, anti-money laundering legislation, and other applicable laws.

bpxch processes your personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity — Processing required to perform the contract between you and bpxch, including operating your account, processing transactions, and delivering the gaming service.
• Legal obligation — Processing required for bpxch to comply with its legal and regulatory obligations, including KYC identity checks, anti-money laundering procedures, and gaming licence compliance reporting.
• Legitimate interests — Processing carried out in pursuit of bpxch's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and service improvement, where those interests are not overridden by your rights and freedoms.
• Consent — Processing based on your freely given, specific, informed, and unambiguous consent, including the sending of direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

bpxch does not sell, rent, or trade your personal data. We may share your personal data with the following categories of third parties, strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

• Payment processors — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa/Mastercard acquirers, and USDT network processors require certain personal and financial data to authorise and settle transactions.
• Identity verification providers — Third-party KYC and age verification services receive identity documents and personal data to complete mandatory verification checks.
• Technology and infrastructure providers — Cloud hosting, platform software, analytics, and security vendors who process data on bpxch's behalf under strict data processing agreements.
• Regulatory and law enforcement authorities — bpxch may disclose personal data to relevant authorities when required by law, court order, or pursuant to a lawful request in connection with a regulatory investigation.
• Fraud prevention agencies — Where bpxch has reasonable grounds to suspect fraudulent activity, relevant data may be shared with fraud prevention databases and industry consortia to protect the platform and other players.

All third parties with whom bpxch shares personal data are required to maintain appropriate technical and organisational security measures and are contractually prohibited from using your data for any purpose beyond that for which it was shared.

bpxch uses cookies and similar tracking technologies — including web beacons, pixel tags, and local storage — to operate and improve the platform. Cookies are small text files placed on your device when you visit bpxch.app.

• Strictly necessary cookies — Essential for the platform to function. These include session authentication cookies and security tokens. These cannot be disabled without breaking core platform functionality.
• Performance cookies — Collect anonymised data about how players use the bpxch platform, including which pages are visited most frequently and where errors occur. This data helps us improve the platform experience.
• Functionality cookies — Remember your preferences such as language settings, game display options, and responsible gaming limits you have set.
• Analytics cookies — Help bpxch understand aggregate usage patterns across the platform to guide product development decisions.

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the performance or availability of some bpxch platform features. A cookie consent banner is displayed on your first visit to bpxch.app where required by applicable law.

bpxch retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulatory obligation. The following general retention periods apply:

Upon expiry of the applicable retention period, bpxch will securely delete or anonymise your personal data so that it can no longer be linked to your identity. Where deletion is not immediately possible due to technical constraints, the data will be isolated and protected from further processing until deletion can be completed.

bpxch implements a layered security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include, but are not limited to:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the bpxch platform.
• AES-256 encryption for sensitive data stored in bpxch databases, including financial details and identity documents.
• Role-based access controls ensuring that only authorised bpxch personnel can access personal data, and only to the extent required for their specific role.
• Regular penetration testing and security audits conducted by independent third-party security specialists.
• Multi-factor authentication requirements for all bpxch staff with access to production systems containing personal data.
• Automated intrusion detection and monitoring systems operating around the clock to identify and respond to anomalous activity.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bpxch will notify affected players without undue delay and will take all reasonable steps to contain and mitigate the breach. bpxch will also notify the relevant supervisory authority where required by applicable law.

As a bpxch player, you hold the following rights in respect of your personal data. You may exercise any of these rights at any time by contacting bpxch support via live chat or email.

bpxch will respond to all data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further two months, in which case bpxch will inform you of the extension and its reasons within the initial 30-day period. bpxch will not charge a fee for handling data rights requests unless they are manifestly unfounded or excessive.

bpxch operates under an international gaming licence and may engage technology service providers and infrastructure partners located in jurisdictions outside Pakistan. As a result, your personal data may be transferred to, stored in, and processed in countries other than Pakistan.

Where such international transfers occur, bpxch ensures that appropriate safeguards are in place to protect your personal data, including:

• Standard contractual clauses or equivalent data transfer mechanisms requiring the recipient to maintain standards of data protection equivalent to those applied by bpxch.
• Transfers only to jurisdictions that maintain adequate data protection frameworks as recognised by applicable supervisory authorities.
• Binding data processing agreements with all third-party processors regardless of their location, imposing obligations consistent with bpxch's Privacy Policy.

By registering on bpxch and accepting these terms, you acknowledge and consent to the international transfer of your personal data under the safeguards described in this section.

The bpxch platform is strictly for adults aged 21 years and above. bpxch does not knowingly collect, store, or process personal data belonging to individuals under the age of 21. Registration on bpxch requires confirmation that you meet the minimum age requirement, and bpxch conducts age verification checks as part of its standard KYC process.

If bpxch becomes aware that personal data has been collected from a person under the age of 21 without verifiable parental or guardian consent, bpxch will take immediate steps to delete that data and close the associated account. Any deposits made by an underage player will be returned, net of any withdrawals already processed.

bpxch reserves the right to update or amend this Privacy Policy at any time. The revised version will be published at bpxch.app/privacy-policy with an updated "Last updated" date. Where changes are material — meaning they significantly affect how your data is collected, used, or shared — bpxch will notify registered players by email or via an in-platform notification before the changes take effect.

Your continued use of the bpxch platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to this policy, you must discontinue use of the platform and may request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bpxch handles your personal data, please get in touch with our support team through the live chat facility available on the bpxch platform. Our support team is available 24 hours a day, 7 days a week.

You may also contact bpxch in writing at: [email protected] — please note this address is displayed as plain text only and is not a clickable link. When contacting us about a data rights request or privacy concern, please include your registered account details and a clear description of your enquiry so that we can respond as efficiently as possible.

bpxch aims to acknowledge all written privacy enquiries within one business day and to resolve data rights requests within the 30-day statutory period. If you are not satisfied with bpxch's response to a privacy concern, you may have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.